Privacy Policy

This Privacy Policy explains how Rachel Buttigieg trading as Relocate2Day ("we", "us", or "our") collects, uses, stores, and protects your personal data when you visit relocate2day.com (the "Website") or use our services.

We are committed to protecting your privacy in accordance with the General Data Protection Regulation (GDPR) and applicable data protection laws.

1. Data Controller

The data controller responsible for your personal data is:

2. What Personal Data We Collect

We collect the following categories of personal data:

a) Account & Identity Data

• Full name and email address (on registration)
• Password (stored securely, hashed by Supabase)
• Google OAuth profile data if you sign in with Google

b) Usage & Quiz Data

• Responses to our country quiz and city quiz
• Relocation checklist items you create or save
• Pages visited and features used

c) Payment Data

• Subscription plan and billing status
• Payment card details are processed directly by Stripe and never stored on our servers

d) Communications Data

• Emails you send to us
• Marketing email preferences

e) Technical Data

• IP address, browser type and version
• Device type and operating system
• Cookies and similar tracking technologies (see Section 8)

3. How We Use Your Personal Data

4. Third-Party Services & Data Sharing

We share your data only with trusted third-party providers necessary to deliver our services. We do not sell your personal data.

Where data is transferred outside the EEA (e.g. to the USA), we rely on Standard Contractual Clauses (SCCs) or equivalent safeguards approved by the European Commission.

5. How Long We Keep Your Data

• Account data: Retained for as long as your account is active, plus 30 days after deletion request.
• Payment records: Retained for 7 years to comply with financial regulations.
• Quiz and checklist data: Retained for the duration of your account.
• Marketing preferences: Retained until you withdraw consent or delete your account.
• Technical/log data: Retained for up to 12 months.

6. Your Rights Under GDPR

You have the following rights regarding your personal data:

• →Right of access: Request a copy of the personal data we hold about you.
• →Right to rectification: Ask us to correct inaccurate or incomplete data.
• →Right to erasure: Request deletion of your personal data ("right to be forgotten").
• →Right to restriction: Ask us to limit how we process your data in certain circumstances.
• →Right to data portability: Receive your data in a structured, machine-readable format.
• →Right to object: Object to processing based on legitimate interests or for direct marketing.
• →Right to withdraw consent: Where processing is based on consent, withdraw it at any time.

To exercise any of these rights, email us at [email protected] or use the data deletion option in your Account page. We will respond within 30 days.

You also have the right to lodge a complaint with your local data protection authority. In Malta this is the Information and Data Protection Commissioner (IDPC).

7. Marketing Communications

We will only send you marketing emails if you have given explicit consent at signup or subsequently opted in. You can withdraw consent at any time by:

• Clicking the unsubscribe link in any marketing email
• Updating your preferences in your Account page
• Emailing [email protected]

Withdrawing consent does not affect the lawfulness of processing carried out before withdrawal. Transactional emails (receipts, password resets, account notices) are not marketing and will continue regardless of marketing preferences.

8. Cookies

We use cookies and similar technologies to operate the Website. These include:

• →Essential cookies: Required for authentication, sessions, and core functionality. Cannot be disabled.
• →Analytics cookies: Help us understand how visitors use the site. Only set with your consent.
• →Preference cookies: Remember your settings and preferences.

You can manage cookie preferences via the cookie banner shown on your first visit, or through your browser settings.

9. Security

We take appropriate technical and organisational measures to protect your data, including encrypted data transmission (HTTPS), hashed password storage, and role-based access controls. However, no system is completely secure. If you believe your account has been compromised, contact us immediately at [email protected].

10. Changes to This Policy

We may update this Privacy Policy from time to time. When we do, we will update the "Last updated" date at the top of this page and, where changes are significant, notify you by email or via a notice on the Website.

11. Contact Us

For any questions, requests, or concerns about this Privacy Policy or how we handle your data, please contact: